Doorstep Dispensaree Ltd, UK pharmacy, fined GBP 275k

On 20/Dec/2019, Doorstep Dispensaree Ltd received a privacy fine of GBP 275,000. The enforcement authority (Information Commissioner's Office) has cited these legal provisions in imposing the fine on Doorstep Dispensaree Ltd: Article 32 GDPR/ GDPR/

Essentials

Date of enforcement action:
20/Dec/2019
Jurisdiction: Fine imposed:
United Kingdom Flag for United Kingdom, which is the jurisdiction taking enforcement action GBP 275,000 (US$360,000)
Defendant company or entity: Industry segment:
Doorstep Dispensaree Ltd Medical / Retail /

Case summary

The Information Commissioner’s Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special category data.

Doorstep Dispensaree Ltd, which supplies medicines to customers and care homes, left approximately 500,000 documents in unlocked containers at the back of its premises in Edgware. The documents included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

The ICO fined the company for failing to take organisational measures to protect this sensitive information, in line with Article 32 of the GDPR.

(ICO Official Release)

Applicable legal provisions

Enforcement information

Enforcement authority: Type of enforcement action:
Information Commissioner's Office Flag for United Kingdom, which is the jurisdiction taking enforcement action Penalty notice
Subject to appeal?
Yes

Cite this fine in your work

Data Privacy Fines Index. (2019-12-20 06:29) Doorstep Dispensaree Ltd, UK pharmacy, fined GBP 275k. dataprivacyfines.com. Retrieved from https://dataprivacyfines.com/fine/doorstep-dispensaree-ltd-uk-pharmacy-fined-gbp-275k/

Entry last updated: 2020-04-15 04:44 GMT.